DoS attacks targeting SIP server and improvements of robustness

Abstract

The paper describes the vulnerability of SIP servers to DoS attacks and methods for server protection. For each attack, this paper describes their impact on a SIP server, evaluation of the threat and the way in which they are executed. Attacks are described in detail, and a security precaution is made to prevent each of them. The proposed solution of the protection is based on a specific topology of an intrusion protection systems components consisting of a combination of Snort, SnortSam and Iptables applications, the solution was verified in experiments. The contribution of this paper includes the performed comparison of the DoS attacks’ efficiency which were tested both without any protection and then with implemented Snort and SnortSam applications as proposed in our solution.